Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
File: 3ILSx-tfpUPjLx7uGc01pWc8-uY.mft (raw, json)
Hash identifier: Ghl5bzI4MqEfEbtSVUUzqeTPqjQsDDEZhaoANMr2M3k=
Subject key identifier: 95:85:C8:82:F2:E3:76:BC:7A:5F:4E:08:55:8F:72:EC:A7:66:D3:A5
Authority key identifier: DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
Certificate issuer: /CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Certificate serial: 0198745043A6C901121FB0BFDE1B577901F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
Manifest number: 04E2
Signing time: Mon 04 Aug 2025 09:01:13 +0000
Manifest this update: Mon 04 Aug 2025 09:01:13 +0000
Manifest next update: Tue 05 Aug 2025 09:01:13 +0000
Files and hashes: 1: 3ILSx-tfpUPjLx7uGc01pWc8-uY.crl (hash: boWgGldok1KZKcDW70U4i6hqGxnrq4PK121Gx6nVxh0=)
2: Mvk_oqElVRdnhvvvd2d0ON2M6O0.roa (hash: h/FNSiffcYfhZT3VlgEkLi4vidisAmOMBIjfYdnqCDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:43:a6:c9:01:12:1f:b0:bf:de:1b:57:79:01:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Validity
Not Before: Aug 4 09:01:13 2025 GMT
Not After : Aug 5 09:01:13 2025 GMT
Subject: CN=9585c882f2e376bc7a5f4e08558f72eca766d3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:ec:92:68:80:34:f7:86:ab:4c:cd:8a:4c:
32:66:5f:a8:e6:6f:24:9f:11:3f:2f:b9:1d:db:33:
eb:c8:fc:b9:b5:71:5e:49:b7:27:d3:da:e1:30:cf:
47:18:ca:a8:ec:52:91:4a:dc:97:56:29:5e:d5:d9:
f0:93:5f:22:48:95:e5:c0:b6:64:b4:46:d2:b0:1e:
22:83:36:06:05:43:50:c4:0e:de:76:e0:1e:6d:ba:
25:25:ff:89:14:8e:0c:31:ad:6e:6e:89:f7:0a:a1:
07:67:d5:9d:a9:66:f2:20:76:c0:46:80:d2:9c:f5:
ae:72:5f:18:d2:cb:f1:50:d0:f6:84:83:c0:21:41:
3a:54:a5:6d:9f:3c:1a:1f:8c:60:25:c0:aa:ac:80:
ed:db:eb:a5:a0:cc:48:98:3d:4f:da:3a:d4:d7:5c:
70:03:0f:ff:b8:ca:77:06:6b:d2:be:ed:15:ab:1d:
85:61:bb:44:d2:50:ba:0d:fc:ed:4a:98:18:2b:04:
3b:57:ac:2b:64:a2:3f:03:e9:f5:71:1b:33:4e:71:
dd:37:5a:bf:4e:12:ca:0d:8e:9a:b8:df:86:68:5b:
50:ea:57:ef:c4:df:3d:09:99:cc:2c:d5:b4:78:d4:
3d:45:9a:a3:4e:b5:f4:e9:29:c9:28:bc:54:9f:56:
00:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:85:C8:82:F2:E3:76:BC:7A:5F:4E:08:55:8F:72:EC:A7:66:D3:A5
X509v3 Authority Key Identifier:
keyid:DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ac:5d:da:bf:50:ee:03:bc:e5:0e:8c:d1:33:b1:2d:ed:20:
51:37:9e:db:6e:52:63:6d:4b:eb:5e:3a:ca:12:17:48:b6:18:
c7:95:91:c2:36:c4:ff:04:c9:93:bf:c4:14:a6:7c:c3:58:6b:
68:8c:03:50:cc:6c:a3:81:d1:82:b3:66:67:8c:32:4e:88:64:
4e:ee:88:08:b8:5d:00:bc:31:23:fa:a9:39:34:e8:46:03:b7:
d5:03:e2:c3:25:a3:39:74:3e:1c:f5:29:7f:c5:c4:a3:56:2b:
9d:6d:a2:c9:0c:43:0a:41:33:b0:a3:d1:de:12:c7:b9:c2:e5:
4d:1a:12:80:f4:31:55:0b:11:63:19:b4:16:06:8e:b0:34:90:
a4:22:34:06:29:42:09:32:ae:ef:48:b9:65:0e:ea:79:31:db:
71:fb:fa:f4:62:ae:cf:15:82:4b:3b:34:5e:ef:d3:e4:cd:61:
37:56:be:64:3e:d1:3d:c9:00:80:03:ba:2c:18:98:5d:f3:a8:
87:19:75:2a:a3:4f:13:80:b8:ac:c4:6a:3d:ca:c5:b4:18:f2:
49:8c:ca:c3:9b:43:76:06:59:a8:92:32:9b:84:e6:8d:53:75:
34:69:cd:90:2e:8f:9b:90:0c:88:5b:54:a4:4a:2d:8c:6a:a4:
ce:25:2a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:21 2025 by rpki-client